Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/7684c4-d4c4-4546-b555-8ebbc8769f84/1/pk-aIUfxp5IRyWIBilHj7aKCI2A.mft
File: pk-aIUfxp5IRyWIBilHj7aKCI2A.mft (raw, json)
Hash identifier: /T8XBbQT+rX1L9h4+EJdiGfd7hIzJMyDqJi5RkLsbZU=
Subject key identifier: 6A:A5:7E:52:E2:D9:63:E9:62:17:5E:9C:89:D4:4D:6B:3C:5B:74:1D
Authority key identifier: A6:4F:9A:21:47:F1:A7:92:11:C9:62:01:8A:51:E3:ED:A2:82:23:60
Certificate issuer: /CN=a64f9a2147f1a79211c962018a51e3eda2822360
Certificate serial: 01A1DF4CC72E540F782957116B3EA52FEF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-aIUfxp5IRyWIBilHj7aKCI2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7684c4-d4c4-4546-b555-8ebbc8769f84/1/pk-aIUfxp5IRyWIBilHj7aKCI2A.mft
Manifest number: 028F
Signing time: Sun 15 Nov 2026 13:01:53 +0000
Manifest this update: Sun 15 Nov 2026 13:01:53 +0000
Manifest next update: Mon 16 Nov 2026 13:01:53 +0000
Files and hashes: 1: osSDINeYKm5_JYjyxZSYnMac5Fw.asa (hash: J+kHxM0skR5UstJh7HIVErlEbjJKJ7i1i+Y59uTkDio=)
2: pk-aIUfxp5IRyWIBilHj7aKCI2A.crl (hash: 90n3jOKJndSuuws9qfNaXkER1kGp8DMjxJPbeMah9Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7684c4-d4c4-4546-b555-8ebbc8769f84/1/pk-aIUfxp5IRyWIBilHj7aKCI2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7684c4-d4c4-4546-b555-8ebbc8769f84/1/pk-aIUfxp5IRyWIBilHj7aKCI2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-aIUfxp5IRyWIBilHj7aKCI2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:c7:2e:54:0f:78:29:57:11:6b:3e:a5:2f:ef:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64f9a2147f1a79211c962018a51e3eda2822360
Validity
Not Before: Nov 15 13:01:53 2026 GMT
Not After : Nov 16 13:01:53 2026 GMT
Subject: CN=6aa57e52e2d963e962175e9c89d44d6b3c5b741d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1e:4d:e3:c5:39:8e:d1:7a:26:5d:66:c4:71:
a2:9c:b9:88:39:ca:48:5a:90:33:0f:90:c7:08:48:
bb:57:38:a5:21:fa:1c:3d:6b:5d:4a:bd:10:7e:d5:
a5:66:c9:4f:4c:5f:09:9c:07:d0:38:d8:4a:98:71:
64:60:89:07:cd:95:03:f6:60:bc:e3:aa:a8:0f:63:
b4:3e:7e:b6:82:64:5b:83:45:8e:52:af:ec:6a:bb:
71:80:cc:23:09:da:dc:e4:00:20:3c:cc:5a:87:e4:
19:e2:9e:b1:89:79:f3:d3:90:c3:4c:7b:b1:33:a1:
11:a0:03:79:08:6c:d6:8f:30:61:bf:62:b4:ef:7e:
af:b1:07:f6:fa:61:f4:8b:03:f8:d0:b8:fc:0b:f6:
8a:78:d4:d6:00:d2:00:9a:61:ee:68:03:32:71:22:
95:a4:4a:d4:56:a8:23:a5:aa:10:1f:36:4d:21:22:
ea:7e:82:c6:5f:8d:cb:67:11:36:5a:e2:98:3a:23:
b5:c7:f2:19:ea:17:57:b7:72:31:00:14:dc:8a:49:
cc:51:0e:ca:71:10:12:af:a7:a0:36:06:a5:68:42:
41:7b:e1:84:eb:7a:94:73:ea:f2:fe:74:61:31:88:
56:2e:77:c7:4f:06:4b:b3:dd:97:54:a1:e5:d2:57:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A5:7E:52:E2:D9:63:E9:62:17:5E:9C:89:D4:4D:6B:3C:5B:74:1D
X509v3 Authority Key Identifier:
keyid:A6:4F:9A:21:47:F1:A7:92:11:C9:62:01:8A:51:E3:ED:A2:82:23:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-aIUfxp5IRyWIBilHj7aKCI2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7684c4-d4c4-4546-b555-8ebbc8769f84/1/pk-aIUfxp5IRyWIBilHj7aKCI2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7684c4-d4c4-4546-b555-8ebbc8769f84/1/pk-aIUfxp5IRyWIBilHj7aKCI2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:39:c8:53:06:5e:c2:7c:02:74:2e:11:45:6e:e0:9d:42:b6:
a4:1e:d2:fa:13:da:4d:24:a5:6a:d9:34:7e:e3:85:f6:00:a2:
ad:7c:13:3c:c2:87:70:f2:23:b1:06:6b:95:05:24:9f:7c:5a:
f0:bc:fc:07:af:94:b2:7d:3b:d2:95:a3:60:dd:4a:11:14:fe:
70:09:fd:6f:cb:51:9e:0a:8e:8d:e4:99:f9:de:f4:5c:c2:70:
ac:cd:1c:d8:5d:f8:dc:5e:59:ed:f7:24:1a:26:2b:10:6b:8d:
a3:11:44:ae:73:39:10:a5:55:56:90:9d:b3:5f:75:9c:fa:fa:
5f:17:40:ec:46:9e:6d:a6:20:3d:a0:ba:d0:6d:57:dd:43:23:
30:2b:77:34:eb:e5:dd:90:d6:14:3c:65:89:bf:8b:6e:ef:e7:
00:41:1b:23:24:12:4d:ab:03:6a:fb:a3:f0:ad:02:39:30:e6:
bf:2f:0f:34:27:96:52:39:54:07:2c:52:cb:3e:2b:e5:a4:17:
b8:4b:0d:a4:11:e8:91:5d:b2:bb:55:d5:6f:80:df:db:51:e4:
5d:f3:1e:3e:06:eb:28:ed:38:5b:1b:f7:17:b8:b1:62:c3:9d:
43:19:f5:c4:57:14:37:f2:68:d0:1c:b2:ce:89:5a:04:cd:31:
ad:5e:99:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:18:27 2026 by rpki-client